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1 . (currently amended) A method of preventing a flooding attack on a network server in 
which a large number of connectionless datagrams are received for queuing to a port on the 
network server, comprising: 

determining, in response to the arrival of a connectionless datagram from a host for a port 
on the network server, if the number of connectionless datagrams already queued to the port from 
the host exceeds a prescribed threshold, further comprises comprising calculating the prescribed 
threshold by multiplying a percentage by the number of available queue slots for the port; 

discarding the datagram, if the number of connectionless datagrams already queued to the 
port from the host exceeds the prescribed threshold; and 

queuing the connectionless datagram to a queue slot of the port, if the number of 
connectionless datagrams already queued to the port from the host does not exceed the prescribed 
threshold. 

2. (cancelled) 

3. (currently amended) An apparatus for preventing a flooding attack on a network server in 
which a large number of datagrams are received for queuing to a port on the server, comprising: 

means for determining, in response to a datagram from a host for the port on the network 
server, if the number of datagrams queued on the port by the host exceeds a prescribed threshold, 
further comprises comprising means for calculating the prescribed threshold by multiplying a 
percentage by a number of available queue slots for the port; 

means for discarding the datagram, if the number of datagrams queued on the port by the 
host exceeds the prescribed threshold; and 
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means for queuing the datagram to a queue slot of the port, if the number of datagrams 
queued on the port by the host does not exceed the prescribed threshold. 

4. (cancelled) 

5. (currently amended) A storage media containing program code that is operable by a 
computer for preventing a flooding attack on a network server in which a large number of 
datagrams are received for queuing to a port on the network server, the program code including 
instructions for causing the computer to execute the steps of 

calculating a prescribed threshold by multiplying a percentage by a number of available 
queue slots for the port; 

determining, in response to receiving a datagram from a host for the port on the network 
server, if the number of datagrams already queued to the port from the host exceeds [[a]] the 
prescribed threshol d, includes further instructions calculating the prescribed threshold by 
multiplying a porcontago by a number of available queue slots for the port ; 

discarding the datagram, if the number of datagrams already queued to the port from the 
host exceeds the prescribed threshold; and 

queuing the datagram to a queue slot of the port, if the number of datagrams already queued 
to the port from the host does not exceed the prescribed threshold. 

6. (cancelled) 

7. (cancelled) 

8. (cancelled) 

9. (previously presented) The method of claim 1 further comprising: 

configuring a maximum number of connectionless datagrams allowed to be queued at the 

port. 
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10. (previously presented) The method of claim 9 wherein the configuring step further includes 
configuring a controlling percentage of available queue slots remaining for the port; and wherein 
the prescribed threshold is based on the controlling percentage of available queue slots remaining 
for the port. 

1 1 . (previously presented) The method of claim 1 wherein the port comprises a plurality of 
queue slots, the method further comprising: 

maintaining a number of available queue slots of the plurality of queue slots for the port. 

12. (previously presented) The apparatus of claim 3 further comprising: 

a means for configuring a maximum number of connectionless datagrams allowed to be 
queued at the port. 

13. (previously presented) The apparatus of claim 12 wherein the means for configuring further 
comprises means for configuring a controlling percentage of available queue slots remaining for 
the port. 

14. (previously presented) The storage media of claim 5 wherein the computer is the network 
server. 
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